This disclosure relates generally to industrial process control and automation systems. More specifically, this disclosure relates to an energy limiting barrier for a universal IO in intrinsically safe industrial applications.
Industrial process control and automation systems are often used to automate large and complex industrial processes. These types of systems routinely include various components including sensors, actuators, and controllers. Some of the controllers can receive measurements from the sensors and/or connected input/output (I/O) subsystems and generate control signals for the actuators.
Existing process control and automation systems typically have hardware components participating in control and I/O functions that are installed in a control room and/or the field. These systems are often used to gather I/O information from the field, which is transmitted to the control room. The systems in the control room can perform various control functions and transmit outputs back to the field.
In hazardous environments, it may be necessary or desirable to energy limit and isolate critical I/O functions using an intrinsically safe barrier. Intrinsic safety (IS) is a protection technique for safe operation of electrical equipment in hazardous areas by limiting the electrical or thermal energy available for ignition. This is typically achieved through the use of one or more IS barriers.
This disclosure provides an integrated energy limiting barrier and galvanic isolation for a redundant set of universal IO in intrinsically safe industrial applications.
In a system includes a back plane including at least one primary module and at least one secondary module that is redundant to the at least one primary module. The back plane is configured to limit energy from the at least one primary module and the at least one secondary module to a field device. The at least one primary module includes a first plurality of channels and is configured to provide channel to channel isolation among the first plurality of channels. The at least one secondary module includes a second plurality of channels and is configured to provide channel to channel isolation among the second plurality of channels.
In a second embodiment, a system includes a power supply, a controller, and a back plane including at least one primary module and at least one secondary module that is redundant to the at least one primary module. The back plane is configured to limit energy from the at least one primary module or the at least one secondary module to a field device. The at least one primary module includes a first plurality of channels and is configured to provide channel to channel isolation among the first plurality of channels. The at least one secondary module including a second plurality of channels and is configured to provide channel to channel isolation among the second plurality of channels.
In a third embodiment, a system includes a primary module, at least one secondary module, and a back plane. The primary module is configured to provide isolation between a safe zone and a hazard zone. The at least one secondary module is redundant to the primary module and is configured to provide isolation between a safe zone and a hazard zone. The back plane is coupled between the primary module and the at least one secondary module and is configured to limit energy provided to a field device from the primary module or the secondary module.
Other technical features may be readily apparent to one skilled in the art from the following figures, descriptions, and claims.
For a more complete understanding of this disclosure, reference is now made to the following description, taken in conjunction with the accompanying drawings, in which:
In the example shown in
At least one input/output (I/O) module (sometimes referred to simply as “IO”) 104 is coupled to the sensors 102a and actuators 102b. The IOs 104 facilitate interaction with the sensors 102a, actuators 102b, or other field devices. For example, an IO 104 could be used to receive one or more analog inputs (AIs), digital inputs (DIs), digital input sequences of events (DISOEs), or pulse accumulator inputs (PIs) or to provide one or more analog outputs (AOs) or digital outputs (DOs). Each IO 104 includes any suitable structure(s) for receiving one or more input signals from or providing one or more output signals to one or more field devices.
The system 100 also includes various controllers 106. The controllers 106 can be used in the system 100 to perform various functions in order to control one or more industrial processes. For example, a first set of controllers 106 may use measurements from one or more sensors 102a to control the operation of one or more actuators 102b. These controllers 106 could interact with the sensors 102a, actuators 102b, and other field devices via the IO(s) 104. A second set of controllers 106 could be used to optimize the control logic or other operations performed by the first set of controllers. A third set of controllers 106 could be used to perform additional functions.
Controllers 106 are often arranged hierarchically in a system. For example, different controllers 106 could be used to control individual actuators, collections of actuators forming machines, collections of machines forming units, collections of units forming plants, and collections of plants forming an enterprise. A particular example of a hierarchical arrangement of controllers 106 is defined as the “Purdue” model of process control. The controllers 106 in different hierarchical levels can communicate via one or more networks 108 and associated switches, firewalls, and other components.
Each controller 106 includes any suitable structure for controlling one or more aspects of an industrial process. At least some of the controllers 106 could, for example, represent proportional-integral-derivative (PID) controllers or multivariable controllers, such as Robust Multivariable Predictive Control Technology (RMPCT) controllers or other types of controllers implementing model predictive control (MPC) or other advanced predictive control. As a particular example, each controller 106 could represent a computing device running a real-time operating system, a WINDOWS operating system, or other operating system.
Operator access to and interaction with the controllers 106 and other components of the system 100 can occur via various operator stations 110. Each operator station 110 could be used to provide information to an operator and receive information from an operator. For example, each operator station 110 could provide information identifying a current state of an industrial process to an operator, such as values of various process variables and warnings, alarms, or other states associated with the industrial process. Each operator station 110 could also receive information affecting how the industrial process is controlled, such as by receiving setpoints for process variables controlled by the controllers 106 or other information that alters or affects how the controllers 106 control the industrial process. Each operator station 110 includes any suitable structure for displaying information to and interacting with an operator.
This represents a brief description of one type of industrial process control and automation system that may be used to manufacture or process one or more materials. Additional details regarding industrial process control and automation systems are well-known in the art and are not needed for an understanding of this disclosure. Also, industrial process control and automation systems are highly configurable and can be configured in any suitable manner according to particular needs.
In particular embodiments, the various controllers and operator stations in
In process control and automation systems such as the system 100, I/O channels are used to connect controllers (such as the controller 106) and field devices (such as the sensors 102a and actuators 102b). In general, IOs 104 can support I/O channels of various types, including analog inputs (AIs), digital inputs (DIs), digital input sequences of events (DISOEs), pulse accumulator inputs (PIs), analog outputs (AOs), or digital outputs (DOs). Different I/O channel types are characterized by different inputs, outputs, voltages, currents, and configurations. For example, AI and AO channels are typically of the 4-20 mA type, but they could also include thermocouples and the like. In contrast, DI and DO channels typically include other configurations.
A universal I/O (UIO) channel is a specialized I/O channel that is reconfigurable to operate as any of multiple I/O channel types. Example types of UIO circuits are shown in U.S. Pat. Nos. 8,072,098; 8,392,626; U.S. Pat. No. 8,656,065; and U.S. Patent Publication No. 2015/0278144 (all of which are hereby incorporated by reference in their entirety). UIO circuits that support UNIVERSAL CHANNEL TECHNOLOGY available from HONEYWELL INTERNATIONAL INC. are also suitable for use.
A UIO channel could have a current output in various configurations, regardless of the I/O type of the field device to which the UIO channel is connected. Often times, the current output is used to measure a corresponding signal. As discussed above, it may be necessary or desirable in some systems to utilize intrinsically safe (IS) barriers to achieve intrinsic safety where hazardous or potentially hazardous conditions may exist. Existing IS barriers are available for use in conjunction with I/O channels, but most IS barriers are configured for use with an I/O channel of a particular I/O type (such as AI or DO).
An IO supporting one or more UIO channels (referred to as a “UIO module” or simply a “UIO”) may use one or more external IS barriers to interface to field devices in hazardous or potentially hazardous locations. In systems that utilize UIOs, low-cost IS barriers that can be installed in the field close to the terminal modules may be an important or critical requirement. However, the use of currently-available third party barriers can be complex and cost prohibitive. Also, existing IS barriers may require additional cabinets for installation, which further increases the size and cost of the implementation.
In accordance with this disclosure, various components in the system 100 could be designed or modified to support an IS energy limiting barrier for use with a UIO. For example, one or more of the sensors 102a and actuators 102b could be disposed in a hazardous or potentially hazardous zone, while one or more of the controllers 106 could be implemented in a safe zone. Moreover, an IO 104 may be used to connect one or more of the controllers 106 and one or more of the sensors 102a and actuators 102b. In some embodiments, the IO 104 represents a UIO. An IS barrier may be integrated into the IO 104 to ensure intrinsic safety. Additional details regarding the IO 104 and the IS barrier are provided below.
Although
As shown in
The controller 202 includes any suitable control system hardware (or combination of hardware and software/firmware) for interacting with or controlling one or more of the field devices. The controller 202 could, for example, represent a multivariable controller, such as a RMPCT controller or other type of controller implementing MPC or APC. As a particular example, the controller 202 could represent one of the controllers 106 of
The IS module 208 is a programmable channel circuit that includes UIO channels and bi-directional I/O terminals. In some embodiments, the IS module 208 can be configured for a predetermined mode or the IS module 208 may automatically select one of multiple modes for each channel depending on the I/O type of the field device connected to the corresponding UIO channel. One characteristic of the IS module 208 is that, regardless of the I/O type of the field device, the IS module 208 provides a current output. That is, in contrast to some IOs that generate or process a voltage output, the IS module 208 can provide a current output regardless of the I/O type of the associated field device. The IS module 208 may accommodate, for example, eight channels 220. Other embodiments of the IS module 208 may contain more or fewer UIO channels. Each channel 220 may be provided with dedicated galvanic isolation and the IS module 208 may provide channel to channel isolation. The IS module 208 is configured for live insertion and removal from an enclosure.
The IS module 208 includes a programmable device such as a processor 222. The processor 222 generally operates to process data and control the overall operation of the IS module 208. The processor 222 may also perform diagnostics on the IS module 208 and/or the field devices (e.g., sensors 102a and/or actuators 102b) connected thereto. The processor 222 denotes any suitable processing device, such as a CPU, AP, or CP.
Each channel 220 in the IS module 208 includes an IO specific circuit 224 such as a UIO application specific integrated circuit (ASIC) that communicates with the processor 222 across galvanic isolation modules 226 and 228. The ASIC 224 represents an integrated circuit (IC) that processes data and controls operation of an interface 230 (e.g., a UIO interface). The ASIC 224 denotes any suitable (IC) for handling one or more I/O functions. The interface 230 controls transmission and reception of signals between the IS module 208 and the field devices. The interface 230 is configured to provide a plurality of inputs and outputs such as AI, AO, DI, DO, PI, etc. A galvanic isolation module 226 may provide power isolation by utilizing, for example, a transformer, while another galvanic isolation module 228 may provide data isolation by means of an optical or capacitive isolator.
The circuitry 232 of each channel 220 limits the energy output between the IS module 208 and the field device corresponding to that channel. For example, the circuitry 232 of each channel can limit output current, voltage, power, or a combination of these. The circuitry 232 can include any suitable structure or components for achieving an energy limiting function. For example, the circuitry 232 can include passive circuit elements, active circuit elements, or a combination of the two. Passive circuit elements include, but are not limited to, resistors, capacitors, inductors, transformers, Zener diodes, and the like. Active circuit elements include, but are not limited to, transistors, silicon-controlled rectifiers (SCRs), and the like. In a passive system, current at the input of the circuitry 232 is received and then limited by one or more passive circuit elements before the current is output. In an active system where the input current is completely isolated from the output current, the input signal is actively monitored and replicated at a safe current level at the output side. Thus, the circuitry 232 limits the energy to the field device regardless of the type of input or output signal without mechanical or software reconfiguration.
The IS module 208 may include a current limiting scheme and channel to channel isolation as well as channel to back end isolation, which may include controller 202 and power supply 204. The IS module 208 also provides IS to IS isolation within IS module 208.
Although
As shown in
The system shown in
Although
As shown in
The memory 410 and a persistent storage 412 are examples of storage devices 404, which represent any structure(s) capable of storing and facilitating retrieval of information (such as data, program code, and/or other suitable information on a temporary or permanent basis). The memory 410 may represent a random access memory or any other suitable volatile or non-volatile storage device(s). The persistent storage 412 may contain one or more components or devices supporting longer-term storage of data, such as a read only memory, hard drive, Flash memory, or optical disc.
The communications unit 406 supports communications with other systems or devices. For example, the communications unit 406 could include at least one network interface card or wireless transceiver facilitating communications over at least one wired or wireless network. The communications unit 406 may support communications through any suitable physical or wireless communication link(s).
The I/O unit 408 allows for input and output of data. For example, the I/O unit 408 may provide a connection for user input through a keyboard, mouse, keypad, touchscreen, or other suitable input device. The I/O unit 408 may also send output to a display, printer, or other suitable output device.
Although
In some embodiments, various functions described in this patent document are implemented or supported by a computer program that is formed from computer readable program code and that is embodied in a computer readable medium. The phrase “computer readable program code” includes any type of computer code, including source code, object code, and executable code. The phrase “computer readable medium” includes any type of medium capable of being accessed by a computer, such as read only memory (ROM), random access memory (RAM), a hard disk drive, a compact disc, a digital video disc, or any other type of memory. A “non-transitory” computer readable medium excludes wired, wireless, optical, or other communication links that transport transitory electrical or other signals. A non-transitory computer readable medium includes media where data can be permanently stored and media where data can be stored and later overwritten, e.g., a rewritable optical disc or an erasable memory device.
It may be advantageous to set forth definitions of certain words and phrases used throughout this patent document. The terms “application” and “program” refer to one or more computer programs, software components, sets of instructions, procedures, functions, objects, classes, instances, related data, or a portion thereof adapted for implementation in a suitable computer code (including source code, object code, or executable code). The term “communicate,” as well as derivatives thereof, encompasses both direct and indirect communication. The terms “include” and “comprise,” as well as derivatives thereof, mean inclusion without limitation. The term “or” is inclusive, meaning and/or. The phrase “associated with,” as well as derivatives thereof, may mean to include, be included within, interconnect with, contain, be contained within, connect to or with, couple to or with, be communicable with, cooperate with, interleave, juxtapose, be proximate to, be bound to or with, have, have a property of, have a relationship to or with, or the like. The phrase “at least one of,” when used with a list of items, means that different combinations of one or more of the listed items may be used, and only one item in the list may be needed. For example, “at least one of: A, B, and C” includes any of the following combinations: A, B, C, A and B, A and C, B and C, and A and B and C.
The description in the present application should not be read as implying that any particular element, step, or function is an essential or critical element that must be included in the claim scope. The scope of patented subject matter is defined only by the allowed claims. Moreover, none of the claims is intended to invoke 35 U.S.C. § 112(f) with respect to any of the appended claims or claim elements unless the exact words “means for” or “step for” are explicitly used in the particular claim, followed by a participle phrase identifying a function. Use of terms such as (but not limited to) “mechanism,” “module,” “device,” “unit,” “component,” “element,” “member,” “apparatus,” “machine,” “system,” “processor,” or “controller” within a claim is understood and intended to refer to structures known to those skilled in the relevant art, as further modified or enhanced by the features of the claims themselves, and is not intended to invoke 35 U.S.C. § 112(f).
While this disclosure has described certain embodiments and generally associated methods, alterations and permutations of these embodiments and methods will be apparent to those skilled in the art. Accordingly, the above description of example embodiments does not define or constrain this disclosure. Other changes, substitutions, and alterations are also possible without departing from the spirit and scope of this disclosure, as defined by the following claims.
Number | Name | Date | Kind |
---|---|---|---|
5712631 | Lewis et al. | Jan 1998 | A |
6154683 | Kessler | Nov 2000 | A |
6397322 | Voss | May 2002 | B1 |
6885949 | Selli | Apr 2005 | B2 |
6896536 | Nguyen et al. | May 2005 | B1 |
7412548 | Sichner | Aug 2008 | B2 |
7991931 | Schmidt et al. | Aug 2011 | B2 |
8392626 | Wormmeester et al. | Mar 2013 | B2 |
8656065 | Gerhart et al. | Feb 2014 | B1 |
9252507 | Nagasaki et al. | Feb 2016 | B2 |
9252513 | Masuda et al. | Feb 2016 | B2 |
9263809 | Assif et al. | Feb 2016 | B2 |
9361247 | Kumar Kn et al. | Jun 2016 | B1 |
9411769 | Erni | Aug 2016 | B2 |
20040019440 | Selli | Jan 2004 | A1 |
20040252428 | Junker | Dec 2004 | A1 |
20050024160 | Vazach | Feb 2005 | A1 |
20100222936 | Helfrick | Sep 2010 | A1 |
20160043560 | Marks | Feb 2016 | A1 |
20160239007 | Cunningham et al. | Aug 2016 | A1 |
Number | Date | Country |
---|---|---|
19512372 | Oct 1996 | DE |
0147702 | Jul 1985 | EP |
1653305 | May 2006 | EP |
2005086110 | Sep 2005 | WO |
2012161942 | Nov 2012 | WO |
2013110296 | Aug 2013 | WO |
2015174979 | Nov 2015 | WO |
Entry |
---|
David Hohenstein, “Intrinsic Safety in a Nutshell, Technical White Paper”, Pepperl+Fuchs, 2009, 4 pages. |
“SMART Universal Barrier”, Pepperl+Fuchs, May 2016, 5 pages. |
Paul S. Babiarz, “Intrinsic Safety Circuit Design”, Omega Engineering, Oct. 1993, p. Z131-Z148. |
Dinesh Kumar KN, “Energy Limiting Barrier for Universal IO in Intrisically Safe Industrial Applications”, U.S. Appl. No. 15/287,180, filed Oct. 6, 2016, 20 pages. |
Dinesh Kumar KN, “Intelligent Field Input/Output (I/0) Terminal for Industrial Control and Related System and Method”, U.S. Appl. No. 15/448,219, filed Mar. 2, 2017, 33 pages. |
Number | Date | Country | |
---|---|---|---|
20180343763 A1 | Nov 2018 | US |